Software-Only Routing for NT

Microsoft turns Windows into a multipurpose network device with its NT RRAS.

Morgan Stern

Microsoft's quest for enterprise OS domination with Windows NT Server takes an important new direction with the release of the Routing and Remote Access Service (RRAS), formerly code-named "Steelhead." Positioned as an inexpensive alternative to satellite-office hardware-based routers and remote-access devices, RRAS turns NT 4.0 Server into a dial-up server or Internet router.

Actually three pieces in one, RRAS includes an enhanced version of the familiar Remote Access Service (RAS), a demand-dial rou ting service, and a completely revamped set of multiprotocol routing tools. RRAS also adds server-to-server Point to Point Tunneling Protocol (PPTP) capability to the client-to-server links introduced in NT 4.0 to simplify the creation of multisite virtual private networks (VPNs). The enhanced version of the already-popul ar RAS includes a redesigned administration tool and RADIUS authentication, which authenticates dial-in users through either the NT security database or a RADIUS server (see the sidebar "The RADIUS Authentication Protocol").

Demand-dial routing lets RRAS establish dial-up network connections on demand. Users and administrators looking to reduce the cost of dial-up Internet and network-to-network connections will find this service useful. The multiprotocol router piece extends NT 4.0's routing functions, adding support for IPRIP versions 1 and 2, OSPF, IPXRIP, and a DHCP relay agent. AppleTalk routing, while supported by the Services for Macintosh compon ent of NT Server, can't be managed through the GUI.

You can install one, two, or all three of the services, although the installation program removes any old versions of the components being updated, such as an existing RAS service. (Keep a recent tape backup handy in case of problems.) The RRAS Admin utility is an Explorer look-alike service-configuration tool that's based on Microsoft Management Console (MMC); you can also enter configuration commands at a command line or in router-configuration scripts.

Although I found installation simple, configuring a multiprotocol routing service to work in an existing network means understanding how the protocols work and how the existing network is configured. So, don't expect to be operational in a half hour if you've never worked with routing protocols before.

RRAS offers basic packet filtering for the IP and IPX protocols, with the ability to filter by source and destination network, protocol, and port number. But filtering alone isn't really a suitable alternative to a stand-alone firewall.

RRAS simply doesn't have the horsepower to replace large backbone routers or switches, but it's not meant to. Microsoft offers RRAS as an inexpensive alternative to small-office dial-up routers or for use with the Microsoft Proxy Server for enterprise-network border routing and access services. For the price, it's hard to beat.

---

Where to Find

Routing and Remote Access Service (RRAS)...........free download for Windows NT 

                                                        
Server 4.0 customers

(Requires Windows NT 4.0 Service Pack 3 and 
 two network interfaces)
Microsoft Corp.
Redmond, WA
Phone:    206-882-8080
Internet: 
http://www.microsoft.com/n
tserver

Enter 1039 on Inquiry Card.

HotBYTEs
 - information on products covered or advertised in BYTE

---

Ratings

Technology	*	*	*	*
Implementation	*	*	*	*
KEY:   ***** Outstanding; **** Very Good; *** Good; ** Fair; * Poor

---

Keep Your Ducks in a Row

screen_link (28 Kbytes)

RRAS keeps remote-access service s and multiple routing protocols in order with the Microsoft Management Console interface.

---

Morgan Stern is a network consultant and the coauthor of NT Enterprise Network Design (Sybex, 1997). You can reach him by sending e-mail to morganst@world.std.com .